Deals

Merge visibility rules into a deal

PATCH/deals/{id}/visibility
deal-visibility:writeupsert_deal_visibilityDeprecatedSunset 2027-06-30

Merges items into the deal's rules, keyed on entity and entity_id, keeps the rules not named and returns every rule. Same validation, 409 rule and dry_run as POST /deals/{id}/visibility, which adds one rule at a time. Emits deal.updated (visibility in changed_fields); no email. Folder access follows after the call returns. Sending the old flags undoes it. Deprecated: it will be withdrawn on 2027-06-30. POST /deals/{id}/visibility replaces it; the Link header names the replacement.

Path parameters

  • idstring (uuid)Required#

    The record's id.

Query parameters

  • dry_runboolean#

    Validate and run the call without committing it, returning what the real call would return with meta.dry_run set.

Request body

application/json, required · DealVisibilityReplace

  • itemsDealVisibilityInput[]Required#

    Every rule the deal should have, at most 1000, with no entity repeated. Send an empty list to clear them all.

{
  "items": [
    {
      "entity": "user",
      "entity_id": "9c4b1d2e-3f5a-4b6c-8d7e-0f1a2b3c4d5e",
      "included": true
    }
  ]
}

Responses

200

Every visibility rule of the deal.

DealVisibility[]
{
  "data": [
    {
      "id": "string",
      "entity": "classification",
      "entity_id": "string",
      "included": true
    }
  ]
}
401

Authentication failed. error.code is one of invalid_token, expired, revoked.

Error
403

Authorization failed. error.code is one of org_disabled, ip_blocked, missing_scope, scope_disabled, user_disabled.

Error
404

Resource not found (error.code = not_found).

Error
409

The request conflicts with existing state (error.code = conflict), e.g. a compliance flow with the requested name already exists.

Error
422

The request can't be processed (HTTP 422): validation_failed with one ErrorDetail per problem, or a code documented on the operation.

Error
429

Rate limit exceeded (error.code = rate_limited).

Error

Examples

curl -X PATCH https://your-org-domain/kong/core/api/v2/deals/{id}/visibility\
  -H "Authorization: Bearer $HELM_API_KEY"\
  -H "Content-Type: application/json"\
  -d '{
  "items": [
    {
      "entity": "user",
      "entity_id": "9c4b1d2e-3f5a-4b6c-8d7e-0f1a2b3c4d5e",
      "included": true
    }
  ]
}'